Problem :
1. Can't start RADIUS Systemd service.
2. Log show like this.
Oct 9 00:00:49 radius1 sh[1114]: C = FR, ST = Radius, L = Somewhere, O = Example Inc., emailAddress = admin@example.org, CN = Example Certificate Authority
Oct 9 00:00:49 radius1 sh[1114]: error 10 at 1 depth lookup: certificate has expired
Oct 9 00:00:49 radius1 sh[1114]: C = FR, ST = Radius, O = Example Inc., CN = Example Server Certificate, emailAddress = admin@example.org
Oct 9 00:00:49 radius1 sh[1114]: error 10 at 0 depth lookup: certificate has expired
Oct 9 00:00:49 radius1 sh[1114]: error server.pem: verification failed
Oct 9 00:00:49 radius1 sh[1114]: make: *** [Makefile:107: server.vrfy] Error 2
Oct 9 00:00:49 radius1 rsyslogd[1098]: imjournal: journal files changed, reloading... [v8.1911.0-6.el8 try https://www.rsyslog.com/e/0 ]
Oct 9 00:00:49 radius1 systemd[1]: radiusd.service: Control process exited, code=exited status=2
Oct 9 00:00:49 radius1 systemd[1]: radiusd.service: Failed with result 'exit-code'.
Oct 9 00:00:49 radius1 systemd[1]: Failed to start FreeRADIUS high performance RADIUS server..
Cause :
Certificate file in `/etc/raddb/certs/` have any expired certificates.
Resolution 1 (If you do not user certificate in /Certs ) :
Delete all certificate files in `/raddb/certs` with this command.
rm -f *.pem *.der *.csr *.crt *.key *.p12 serial* index.txt*
Resolution 2 :
Create new certificate new certificate instead expired certs.
No comments:
Post a Comment